CVE-2025-30064

Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

State: Published
Severity: 8.8 High
Published: Aug 27, 2025
Updated: Aug 27, 2025
Reserved: Mar 14, 2025

Description

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to generate a session for any user.

Scores

CVSS	Score	Vector	Source
4.0	8.8 High	CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	CERT-PL

Weaknesses

CWE-912 Hidden Functionality
CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
CGM CLININETCGM	before 2025.MS2Affected

References

https://cert.pl/en/posts/2025/08/CVE-2025-2313/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.